Last updated: 3 August 2026
AurAtelier Art (“AurAtelier”, “we”, “our”) is an art and creative-collaboration platform operated from the Netherlands. This policy explains how the AurAtelier Android app accesses, collects, uses, shares, stores and deletes user data.
DATA WE COLLECT
We process account and profile data such as name, email, username, profile image, role and optional contact or business information. We process content users choose to create or send, including artwork, posts, Stories, comments, reactions, direct and room messages, live-session data, canvases, moodboards, rooms, invitations, reports, workshops and business projects. Camera, microphone and photo-library access is used only when a user chooses a feature requiring it. We may process device, push-token, IP, crash, security and first-party usage-event data needed for app operation, fraud prevention, support, analytics and reliability.
PURPOSES AND LEGAL BASES
Data is used to provide accounts and requested features, synchronize and secure content, deliver notifications, enforce limits, moderate abuse, provide support, improve reliability and meet legal obligations. GDPR legal bases may include performance of a contract, consent, legitimate interests in security and service improvement, and compliance with law.
SERVICE PROVIDERS AND SHARING
AurAtelier uses Supabase for authentication, database and storage; LiveKit for live video; Expo for application services and push delivery; Google Play for Android subscriptions; and OpenAI only when a user requests an AI-curation feature. These providers process only the data needed to provide their services. AurAtelier does not sell personal data. Data may also be disclosed to authorities or professional advisers where legally required.
PAYMENTS
Android digital subscriptions are processed by Google Play. AurAtelier does not store complete payment-card or bank-account details. Artwork purchases and workshop bookings are not currently available.
PUBLIC AND PRIVATE CONTENT
Public profiles, posts, public Lives and other content selected as public can be seen by other users. Stories are follower-only. Private Inspiration Rooms and their content are limited to invited members, subject to the controls described in the app.
COMMUNITY SAFETY
Users can report content or conduct for moderation and can block another member from that member’s public profile. Blocking hides the blocked member’s content and direct conversations and prevents further direct messaging between the two accounts.
BUSINESS INFORMATION
Business and atelier accounts provide a business or atelier name. VAT and Chamber of Commerce or other registration numbers are optional at sign-up unless they legally apply to the organisation. AurAtelier may request appropriate verification information later where needed for safety, legitimacy or legal compliance.
RETENTION, SECURITY AND INTERNATIONAL PROCESSING
We retain data only as long as needed for the service, security, disputes and legal obligations. We use access controls, row-level database security, encrypted transport and restricted backend credentials. Providers may process data outside the EEA using an applicable lawful transfer mechanism.
YOUR RIGHTS AND ACCOUNT DELETION
Users may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where applicable. Account deletion is available in Profile > Account Settings and on our external Account Deletion page. After the 14-day grace period, authentication credentials, profile data, user content and owned media are deleted. Records legally required for accounting, fraud prevention or disputes may be de-identified and retained only as necessary.
CHILDREN
AurAtelier is intended for people aged 16 or older and does not knowingly permit children under 16 to create accounts.
CONTACT
Data controller: AurAtelier Art, Netherlands.
Privacy and deletion requests: auratelierart@gmail.com
Users may complain to the Dutch Data Protection Authority or another competent supervisory authority.